CVE-2016-5362
Fixed in a distro release EPSS 3%
The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended DHCP-spoofing protection mechanism and consequently cause a denial of service or intercept network traffic via a crafted DHCP discovery message.
Products: openstack neutron
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | neutron | 7.0.5 |
| PyPI | neutron | 8.1.1 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | neutron | 2:8.1.2-1 |
| Debian 13 | neutron | 2:8.1.2-1 |
| Debian 14 | neutron | 2:8.1.2-1 |
| Red Hat openstack 7 | openstack-neutron | 0:2015.1.4-2.el7ost |
| Red Hat openstack 7 | openstack-neutron-bigswitch | 0:2015.1.4-2.el7ost |
| Red Hat openstack 7 | openstack-neutron-brocade | 0:2015.1.4-2.el7ost |
| Red Hat openstack 7 | openstack-neutron-cisco | 0:2015.1.4-2.el7ost |
| Red Hat openstack 7 | openstack-neutron-common | 0:2015.1.4-2.el7ost |
| Red Hat openstack 7 | openstack-neutron-embrane | 0:2015.1.4-2.el7ost |
| Red Hat openstack 7 | openstack-neutron-ibm | 0:2015.1.4-2.el7ost |
| Red Hat openstack 7 | openstack-neutron-linuxbridge | 0:2015.1.4-2.el7ost |
| Red Hat openstack 7 | openstack-neutron-mellanox | 0:2015.1.4-2.el7ost |
| Red Hat openstack 7 | openstack-neutron-metaplugin | 0:2015.1.4-2.el7ost |
| Red Hat openstack 7 | openstack-neutron-metering-agent | 0:2015.1.4-2.el7ost |
| Red Hat openstack 7 | openstack-neutron-midonet | 0:2015.1.4-2.el7ost |
| Red Hat openstack 7 | openstack-neutron-ml2 | 0:2015.1.4-2.el7ost |
| Red Hat openstack 7 | openstack-neutron-nec | 0:2015.1.4-2.el7ost |
| Red Hat openstack 7 | openstack-neutron-nuage | 0:2015.1.4-2.el7ost |
| Red Hat openstack 7 | openstack-neutron-ofagent | 0:2015.1.4-2.el7ost |
| Red Hat openstack 7 | openstack-neutron-oneconvergence-nvsd | 0:2015.1.4-2.el7ost |
| Red Hat openstack 7 | openstack-neutron-opencontrail | 0:2015.1.4-2.el7ost |
| Red Hat openstack 7 | openstack-neutron-openvswitch | 0:2015.1.4-2.el7ost |
| Red Hat openstack 7 | openstack-neutron-ovsvapp | 0:2015.1.4-2.el7ost |
| Red Hat openstack 7 | openstack-neutron-plumgrid | 0:2015.1.4-2.el7ost |
| Red Hat openstack 7 | openstack-neutron-sriov-nic-agent | 0:2015.1.4-2.el7ost |
| Red Hat openstack 7 | openstack-neutron-vmware | 0:2015.1.4-2.el7ost |
| Red Hat openstack 7 | python-neutron | 0:2015.1.4-2.el7ost |
| Red Hat openstack 7 | python-neutron-tests | 0:2015.1.4-2.el7ost |
| Red Hat openstack 8 | openstack-neutron | 1:7.0.4-11.el7ost |
| Red Hat openstack 8 | openstack-neutron-bigswitch | 1:7.0.4-11.el7ost |
| Red Hat openstack 8 | openstack-neutron-brocade | 1:7.0.4-11.el7ost |
| Red Hat openstack 8 | openstack-neutron-cisco | 1:7.0.4-11.el7ost |
| Red Hat openstack 8 | openstack-neutron-common | 1:7.0.4-11.el7ost |
| Red Hat openstack 8 | openstack-neutron-dev-server | 1:7.0.4-11.el7ost |
| Red Hat openstack 8 | openstack-neutron-embrane | 1:7.0.4-11.el7ost |
| Red Hat openstack 8 | openstack-neutron-linuxbridge | 1:7.0.4-11.el7ost |
| Red Hat openstack 8 | openstack-neutron-mellanox | 1:7.0.4-11.el7ost |
| Red Hat openstack 8 | openstack-neutron-metering-agent | 1:7.0.4-11.el7ost |
| Red Hat openstack 8 | openstack-neutron-midonet | 1:7.0.4-11.el7ost |
| Red Hat openstack 8 | openstack-neutron-ml2 | 1:7.0.4-11.el7ost |
| Red Hat openstack 8 | openstack-neutron-nuage | 1:7.0.4-11.el7ost |
| Red Hat openstack 8 | openstack-neutron-ofagent | 1:7.0.4-11.el7ost |
| Red Hat openstack 8 | openstack-neutron-oneconvergence-nvsd | 1:7.0.4-11.el7ost |
| Red Hat openstack 8 | openstack-neutron-opencontrail | 1:7.0.4-11.el7ost |
| Red Hat openstack 8 | openstack-neutron-openvswitch | 1:7.0.4-11.el7ost |
| Red Hat openstack 8 | openstack-neutron-ovsvapp | 1:7.0.4-11.el7ost |
| Red Hat openstack 8 | openstack-neutron-rpc-server | 1:7.0.4-11.el7ost |
| Red Hat openstack 8 | openstack-neutron-sriov-nic-agent | 1:7.0.4-11.el7ost |
| Red Hat openstack 8 | python-neutron | 1:7.0.4-11.el7ost |
| Red Hat openstack 8 | python-neutron-tests | 1:7.0.4-11.el7ost |
| SUSE OpenStack Cloud 6 | openstack-ceilometer | 5.0.4~a0~dev6-6.1 |
| SUSE OpenStack Cloud 6 | openstack-ceilometer-doc | 5.0.4~a0~dev6-6.2 |
| SUSE OpenStack Cloud 6 | openstack-cinder | 7.0.3~a0~dev2-7.1 |
| SUSE OpenStack Cloud 6 | openstack-cinder-doc | 7.0.3~a0~dev2-7.1 |
| SUSE OpenStack Cloud 6 | openstack-dashboard | 8.0.2~a0~dev34-8.1 |
| SUSE OpenStack Cloud 6 | openstack-glance | 11.0.2~a0~dev13-7.1 |
| SUSE OpenStack Cloud 6 | openstack-glance-doc | 11.0.2~a0~dev13-7.1 |
| SUSE OpenStack Cloud 6 | openstack-heat | 5.0.2~a0~dev93-9.1 |
| SUSE OpenStack Cloud 6 | openstack-heat-doc | 5.0.2~a0~dev93-9.3 |
| SUSE OpenStack Cloud 6 | openstack-keystone | 8.1.1~a0~dev13-3.1 |
| SUSE OpenStack Cloud 6 | openstack-keystone-doc | 8.1.1~a0~dev13-3.2 |
| SUSE OpenStack Cloud 6 | openstack-manila | 1.0.2~a0~dev11-9.1 |
| SUSE OpenStack Cloud 6 | openstack-manila-doc | 1.0.2~a0~dev11-9.2 |
| SUSE OpenStack Cloud 6 | openstack-neutron | 7.1.2~a0~dev29-10.1 |
| SUSE OpenStack Cloud 6 | openstack-neutron-doc | 7.1.2~a0~dev29-10.1 |
| SUSE OpenStack Cloud 6 | openstack-neutron-fwaas | 7.1.2~a0~dev1-6.1 |
| SUSE OpenStack Cloud 6 | openstack-neutron-fwaas-doc | 7.1.2~a0~dev1-6.1 |
| SUSE OpenStack Cloud 6 | openstack-neutron-lbaas | 7.1.2~a0~dev1-6.1 |
| SUSE OpenStack Cloud 6 | openstack-neutron-lbaas-doc | 7.1.2~a0~dev1-6.1 |
| SUSE OpenStack Cloud 6 | openstack-nova | 12.0.5~a0~dev2-7.1 |
| SUSE OpenStack Cloud 6 | openstack-nova-doc | 12.0.5~a0~dev2-7.1 |
| SUSE OpenStack Cloud 6 | openstack-resource-agents | 1.0+git.1467079370.4f2c49d-7.1 |
| SUSE OpenStack Cloud 6 | python-networking-cisco | 2.1.1-6.1 |
| SUSE OpenStack Cloud 6 | python-openstackclient | 1.7.2-4.1 |